c1b69e5c8d71ac3c5c8e1f00550199cadd2d5a8fa0f317c353a2614adf81f3be

Sharing

Copy URL

Twitter E-mail

General

Target

c1b69e5c8d71ac3c5c8e1f00550199cadd2d5a8fa0f317c353a2614adf81f3be
Size

155KB
MD5

5589a24c77e6c3da18fe05f02c8f89a0
SHA1

33e2dec5bebaf995b66567bd5abe5b220c394a3d
SHA256

c1b69e5c8d71ac3c5c8e1f00550199cadd2d5a8fa0f317c353a2614adf81f3be
SHA512

591b424c1c44e787a08703834d1475bf5bf4e0a0031a930a0caff261442548dfee5f81847241de1d46b6a1938eb88248de01c7e5bf3c89f399928c5c2e8ca583
SSDEEP

3072:J4bEXxvfGK1Qa8JRZemm3Qnc3MXInJjalr:GbE5fxP8J2MXEJ

Score

N/A

Malware Config

Signatures

Files

c1b69e5c8d71ac3c5c8e1f00550199cadd2d5a8fa0f317c353a2614adf81f3be
.dll windows x86

77927aec1f4f1a19b987587c5331f947

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

LoadLibraryA
GetModuleHandleA
DeleteFileA
Sleep
WriteFile
GetTempPathA
ReadFile
GetFileSize
CreateFileA
TerminateThread
CreateToolhelp32Snapshot
GetCurrentProcessId
SetThreadPriority
TerminateProcess
CreateEventA
OpenEventA
GetTickCount
OutputDebugStringA
GetCommandLineA
GetWindowsDirectoryA
Process32Next
Process32First
GetVersionExA
GetLocalTime
CreateProcessA
OpenProcess
GetSystemDirectoryA
GetCurrentThreadId
DeviceIoControl
ExitProcess
DisableThreadLibraryCalls
VirtualAlloc
VirtualFree
MultiByteToWideChar
WriteProcessMemory
VirtualProtectEx
GetProcAddress
ResumeThread
GetCurrentThread
GetLastError
SetErrorMode
CompareStringW
CompareStringA
LCMapStringW
LCMapStringA
GetOEMCP
GetACP
GetCPInfo
FlushFileBuffers
SetStdHandle
GetStringTypeW
GetStringTypeA
IsBadCodePtr
SetUnhandledExceptionFilter
SetFilePointer
SetEnvironmentVariableA
IsBadWritePtr
HeapReAlloc
GetEnvironmentStringsW
GetEnvironmentStrings
FreeEnvironmentStringsW
FreeEnvironmentStringsA
GetStartupInfoA
GetFileType
SetHandleCount
HeapCreate
HeapDestroy
GetEnvironmentVariableA
GetStdHandle
HeapAlloc
HeapFree
GetVersion
GetSystemTime
GetTimeZoneInformation
RtlUnwind
GlobalUnlock
WideCharToMultiByte
GlobalAlloc
GlobalLock
GlobalFree
GetModuleFileNameA
GetCurrentProcess
CreateThread
CloseHandle
ReadProcessMemory
IsBadReadPtr

user32

GetWindowThreadProcessId
wsprintfA
UnhookWindowsHookEx
PostMessageA
GetWindowTextA
EnumWindows
GetMessageA
PostThreadMessageA
GetInputState
ClipCursor

wininet

InternetCloseHandle
InternetReadFile
InternetOpenUrlA
HttpQueryInfoA
InternetOpenA
InternetOpenW
InternetOpenUrlW

ws2_32

inet_ntoa
getpeername

advapi32

OpenProcessToken
AdjustTokenPrivileges
RegDeleteKeyA
RegDeleteValueA
RegQueryValueExA
RegOpenKeyExA
RegCreateKeyExA
RegSetValueExA
RegFlushKey
RegCloseKey
RegEnumValueA
LookupPrivilegeValueA

Exports

Exports

WSHAddressToString
WSHEnumProtocols
WSHGetBroadcastSockaddr
WSHGetProviderGuid
WSHGetSockaddrType
WSHGetSocketInformation
WSHGetWSAProtocolInfo
WSHGetWildcardSockaddr
WSHGetWinsockMapping
WSHIoctl
WSHJoinLeaf
WSHNotify
WSHOpenSocket
WSHOpenSocket2
WSHSetSocketInformation
WSHStringToAddress

Sections

.text
Size: 132KB - Virtual size: 131KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

zdata
Size: 9KB - Virtual size: 9KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

vdata
Size: 1024B - Virtual size: 1024B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 8KB - Virtual size: 7KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

77927aec1f4f1a19b987587c5331f947

Headers

File Characteristics

Imports

kernel32

user32

wininet

ws2_32

advapi32

Exports

Exports

Sections

.text Size: 132KB - Virtual size: 131KB

zdata Size: 9KB - Virtual size: 9KB

vdata Size: 1024B - Virtual size: 1024B

.rsrc Size: 4KB - Virtual size: 3KB

.reloc Size: 8KB - Virtual size: 7KB

.text
Size: 132KB - Virtual size: 131KB

zdata
Size: 9KB - Virtual size: 9KB

vdata
Size: 1024B - Virtual size: 1024B

.rsrc
Size: 4KB - Virtual size: 3KB

.reloc
Size: 8KB - Virtual size: 7KB